GSSAPI / Native Kerberos API

[Konstantin Kunshchikov]

Hi, Christian!

>
>Well, what I want to do is secure the access to an application server which
>will make objects available through a TCP service. The application server is
>not yet developed, but the client is, though without any secured
>authentication so far. So i guess i should definitly choose SASL.
>
>Any known cases/architectures/environments where SASL and/or GSSAPI  might
>fail ?
>

One of that case is CMU SASL and MIT Kerberos currently not thread-safe.

Regards,
Konstantin.

>Anyway, thanks to you guys for the replies.
>
>Christian.
>
>
>
>________________________________________________
>Kerberos mailing list           Kerberos at mit.edu
>http://mailman.mit.edu/mailman/listinfo/kerberos

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Konstantin Kunshchikov, system programmer, Elbrus Inc, kvk at elbrus.ru